Approved changes feed: RSS · Atom

cpe:2.3:a:progress:ipswitch_ws_ftp_server:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorProgress (f9d80521-f73f-5a85-8df9-9306f2f67809)
ProductIpswitch Ws Ftp Server (76211645-7f0d-5eb0-826d-625f3ad4f0e5)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-36968 vulnerable 2026-06-03 14:47:41.121182 Details available
In Progress WS_FTP Server prior to version 8.7.3, forms within the administrative interface did not include a nonce to mitigate the risk of cross-site request forgery (CSRF) attacks.
Published: 2022-08-02T21:58:52.000Z
Updated: 2024-08-03T10:21:32.341Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-36967 vulnerable 2026-06-03 14:47:41.120786 Details available
In Progress WS_FTP Server prior to version 8.7.3, multiple reflected cross-site scripting (XSS) vulnerabilities exist in the administrative web interface. It is possible for a remote attacker to inject arbitrary JavaScript into a WS_FTP administrator's web session. This would allow the attacker to execute code within the context of the victim's browser.
Published: 2022-08-02T21:58:48.000Z
Updated: 2024-08-03T10:21:32.503Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.